Kithack is a framework designed to automate the process of downloading and installing different tools for penetration testing, with a special option that allows generating cross-platform backdoors using Metasploit Framework.

KitHack Compatible Distributions:

Distribution	State
Kali Linux	Compatible
Ubuntu	Compatible
Xbuntu	Compatible
Debian	Compatible
Raspbian	Compatible
Deepin	Compatible
Parrot OS	Compatible
Arch Linux	Developing
Termux	Developing

Installation:

# Update your package list
$ sudo apt update

# Install python3 python3-pip
$ sudo apt install python3 python3-pip

# Clone the repository 
$ git clone https://github.com/AdrMXR/KitHack.git

# Enter the repository
$ cd KitHack

# Install KitHack
$ sudo bash install.sh

# Start KitHack
$ sudo python3 KitHack.py

# You can also run it from the shortcut
$ kithack

# When you want to update run
$ sudo bash update.sh

# To uninstall run
$ sudo bash uninstall.sh

Dependencies:

sudo
xterm
postgresql
Metasploit-Framework
apktool
aapt
jarsigner
zipalign
requests
pwgen
py-getch
python-tk
pathlib
python-zenity
pgrep
Ngrok authtoken

New features:

1) Debugging of obsolete tools.

It is essential that our users report us any tool that is not being installed correctly, since that way we will be able to completely debug it from kithack.

2) Integration of new tools.

As we debug tools we also integrate some new ones, if you have a personal project on github that you would like to appear in our toolkit, or if you are interested in being a kithack contributor, read our contribution policy.

3) Unification of types of Payloads (by stages and without stages).

Kithack allows us to use payloads in stages and individual. If you want to know their differences, see here.

4) Incorporation of a new method that allows infecting legitimate Android applications.

Kithack gives us the option to infect an original APK. It should be noted that not all applications are vulnerable.

5) Generation of TCP connections with ngrok.

Now you can also work with ngrok to carry out attacks outside your network without the need to open ports. The configuration file ngrok.yml is stored in KitHack/.config by default. If for some reason you need kithack to request your authtoken again, write rm .config/ngrok.yml.

6) Metasploit Automation.

You don't have to waste time re-setting your payload settings, kithack takes care of listening to metasploit quickly.

7) Custom payloads for android.

Now you also have the possibility to customize your own payload for Android. With kithack you can change the default name of the apk generated by metasploit known as "MainActivity" and you can also modify the default Android icon. Click here to know the format.

8) Automated persistence application for any APK.

Forget that your [metasploit] session (https://www.metasploit.com) expires very fast, with kithack you can now generate your persistence file for any APK. If you want to know how to start it in the meterpreter shell, click here.

9) Run tools.

Now the user can run the tools directly from kithack even though they are already installed.

10) Creation of clean.sh.

If you need to remove the content that kithack has generated in your tools and output folders, you can run the clean.sh file to do it quickly.

Some vulnerable APK:

APK	Version
FaceApp	1.00
Pou	1.4.79
Google Now Launcher	1.4.large
Terminal Emulator	1.0.70
Solitaire	3.6.0.3
RAR	5.60.build63
WPSApp	1.6.7.3
Phone Cleaner	1.0
Ccleaner	1.19.74
AVG Cleaner	2.0.2

Screenshots:

Main menu	Backdoor generator

Videos:

Demo 1	Demo 2

Bug?

If the tool fails, follow these steps:

Take a screenshot and see the error in detail
Contact me through the following email: [email protected]
Submit the screenshot and explain your problem with that error.

Contributors:

Ironpuerquito
C1b0rk

Licence:

MIT License

KitHack

Most Popular